CVE-2021-37863

Опубликовано: 17 дек. 2021

Источник: nvd

CVSS3: 3.5

CVSS3: 5.7

CVSS2: 3.5

EPSS Низкий

Описание

Mattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which allows authenticated attackers to cause a client-side crash of the web application via a maliciously crafted post.

Ссылки

https://hackerone.com/reports/1253732
Permissions Required
https://mattermost.com/security-updates/
Vendor Advisory
https://hackerone.com/reports/1253732
Permissions Required
https://mattermost.com/security-updates/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*

Версия до 6.0 (включая)

EPSS

Процентиль: 68%

0.00572

Низкий

3.5 Low

CVSS3

5.7 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2021-37863

CVSS3: 3.5

debian

около 4 лет назад

Mattermost 6.0 and earlier fails to sufficiently validate parameters d ...

GHSA-7523-wx28-g6xf

github

около 4 лет назад

EPSS

Процентиль: 68%

0.00572

Низкий

3.5 Low

CVSS3

5.7 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-20